"Bring Your Own SBOM" sounds simple...
Until you try to manage thousands of them 📊
Scale is everything 📈
https://anchore.com/platform/sbom/
#SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps
@anchore.com
@anchore.com"Bring Your Own SBOM" sounds simple...
Until you try to manage thousands of them 📊
Scale is everything 📈
https://anchore.com/platform/sbom/
#SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps
@anchore.comScale-out architecture for web-scale environments 📈
Because your containers don't wait for security scans ⏱️
https://anchore.com/platform/secure/
#SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps
@vpierre06.bsky.social🆕 Explore the new ndaal SBOM Auditor demo!
Inspect Software Bills of Materials (SBOMs) and explore how better SBOM analysis can support software supply-chain security.
🌐 Demo: sbom.ndaal.eu
🦀 Open Source : crates.io/crates/sbom-...
Try it out and share your feedback!
@cvedatabase.bsky.socialSecurity Tip: Transparency is key to supply chain security. 🛡️ Use a Software Bill of Materials (SBOM) to maintain a clear inventory of all libraries and dependencies in your stack. It makes responding to new CVEs much faster.
Resources: https://cvedatabase.com
#SBOM
@anchore.com#Security and #compliance teams need visibility into every software component. An #SBOM provides that transparency—mapping dependencies, identifying vulnerabilities, and ensuring compliance. Learn how to implement SBOMs in your workflow: https://get.anchore.com/sbom101-guide-for-devsecops-community/
@autoaugeo.bsky.socialFree Python CLI: reads lock files or an SBOM and flags dependency licences that clash with your project's policy. Standard library only, no dependencies. Built by AI agents; not legal advice.
https://github.com/autoaugeo/augeo-dependency-license-checker-15b5
@anchore.comFedRAMP compliance in weeks, not months ⚡
Ready-to-deploy policy packs for instant compliance feedback 📋
@anchore.comFalse positives killing your team's productivity? 😵💫
Anchore Secure gives you signal, not noise 📡
https://anchore.com/platform/secure/
#SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps
@cpswan.netI chatted to Olimpiu Pop on the @infoq.com Podcast about this year's QCon London security track, and some plans for next year's.
We talk about hardware (#CHERI), #CRA and #SBOM, #postquantum_cryptography and of course #LLM and #AI
@msbiro.netSigned your SBOM? That is the middle, not the end. How I store, verify and rescan it with Harbor, Dependency-Track, GUAC, Ratify and Kyverno, with CRA in mind. www.msbiro.net/posts/sbom-s... #SBOM #SupplyChain
@lunarisdigital.bsky.socialNeue Sicherheitsmeldung: Welche unserer Maschinen ist betroffen? Ein Rundgang durch IPC, PLC und Sensoren zeigt, wie wir die Meldung konkreten Installationen zuordnen: <https://lunaris.digital/blog/articles/2026-10-06-cra-product-identifiers> #SBOM #IndustrialSecurity
@cvedatabase.bsky.socialSecurity Tip: You can't secure what you don't know you have. 🛡️ Generate a Software Bill of Materials (SBOM) for every application. It’s the "ingredients list" for your code, making it easier to track and respond to new CVEs.
Stay informed: https://cvedatabase.com
#SBOM #InfoSec
@anchore.comShift-left compliance checking ⬅️
Catch violations before deployment, not during audits 🛡️
@syftproject.bsky.socialSyft users! 📣 We want to hear from YOU! Take our quick 5-question survey to help shape the future of Syft. Your feedback is invaluable! 👉 https://forms.gle/VJZ7idKZgchminYD7
#Syft #SBOM #OpenSource
@anchore.comWith the EU's Cyber Resilience Act, #SoftwareTransparency isn't optional. It's a global mandate.
We're thrilled to announce #SBOM pioneer @allanfriedman.bsky.social is joining the Anchore board to help nav... https://anchore.com/blog/anchore-welcomes-sbom-pioneer-dr-allan-friedman-as-board-advisor/
@lunarisdigital.bsky.socialRelease-SBOM und installierter Maschinenzustand gehören in unterschiedliche Systeme. lunaris.digital/blog/article... #sbom #dependencytrack
@wolfssl.comSave the date: Sep 29 | 15:00 CEST / 6:00 PST
Register now: us02web.zoom.us/webi...
#CyberResilienceAct #CRA #SecureBoot #SBOM
@jobrunr.bsky.socialOpen source is exempt from the EU Cyber Resilience Act.
True or false? We put it and five other CRA claims to Cresco's tech lawyers. Answers in the full recording 👇
@cvedatabase.bsky.socialSecurity Tip: Implement a Software Bill of Materials (SBOM) strategy. 🛡️ Knowing exactly what's in your software stack is the first step to securing it. Use tools to automate SBOM generation and track component risks. Learn more: https://cvedatabase.com #SBOM #InfoSec #AppSec
@donwebmedia.bsky.social